![](/console.gif)
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
File: YmINYNuoUorqQhLM7bcpYTqZFVw.cer (raw, json)
Hash identifier: FiMNzMv3WGGQe/I3j0oQsVOogyQCOT4lLsyxGBASZY8=
Subject key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4888
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 11 Oct 2024 12:55:17 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 194.127.104.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18568 (0x4888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Oct 11 12:55:17 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A912CDC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:cd:3d:50:09:1e:5f:29:a9:71:f5:19:8d:
fb:37:52:f2:88:3b:19:30:5a:c4:b5:be:c2:85:b2:
25:6f:25:f9:5c:32:ea:8a:ab:ff:f3:9b:de:8a:93:
8f:98:78:c8:8c:67:39:a3:33:73:b1:6b:b1:6c:26:
e8:7c:38:6c:37:f2:72:4d:da:af:c2:91:70:68:d5:
4a:2f:1b:ff:98:ae:e2:bb:50:79:0f:cd:44:d5:f7:
d8:9c:7a:61:ea:ab:01:5a:49:d1:c7:88:3e:0f:74:
4b:02:c1:92:f4:3d:a5:f5:74:ba:b7:df:22:ed:9d:
f8:db:6f:91:42:14:46:9e:4d:d3:39:0b:7d:f4:05:
8d:2d:2d:2c:56:e5:61:3f:34:17:bf:3b:83:06:f5:
d7:85:9b:4f:95:03:18:90:07:e9:6c:66:f2:02:dd:
35:db:f7:f8:fa:18:d2:3e:81:98:9c:1a:23:c7:83:
84:df:d7:06:a0:b7:7e:53:3c:09:cd:d7:c1:64:6b:
67:8e:d1:06:31:56:68:f1:22:aa:4c:2e:76:4a:0d:
7d:42:23:89:40:58:e9:27:4e:a4:90:fc:66:e6:41:
2d:57:3a:e0:b9:64:c5:be:ab:2e:7c:38:c5:8f:13:
49:65:d4:5f:2d:c5:b7:d4:22:a6:0b:a9:a5:47:a2:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
194.127.104.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:16:8f:41:a0:3a:0c:c4:80:55:0a:fd:55:f7:83:dc:5f:0c:
d6:98:7d:47:63:c8:00:19:d6:32:a3:6a:56:a1:cc:7d:c7:c6:
cd:7b:d4:c2:12:ad:2b:7f:8c:7f:5c:b6:78:26:2a:4e:12:43:
c4:c6:5f:6d:20:19:73:f1:98:03:2d:f6:b2:db:ea:93:f5:66:
ba:49:e8:de:da:74:f5:9f:b6:c6:21:0c:88:82:6a:a3:a9:7a:
9e:db:f9:4a:f8:1f:0b:b3:47:fa:2c:31:f6:b4:0c:ba:a6:08:
59:35:64:01:bd:94:ab:5a:93:4a:a1:67:ec:3e:e1:47:4b:46:
19:33:60:b3:18:eb:91:26:05:c4:72:bd:9b:73:59:a7:60:89:
aa:ce:c3:17:28:2a:0c:06:94:99:26:57:11:1c:05:80:bf:9b:
d7:df:ec:9b:6a:0d:2c:00:ee:59:44:b1:a9:d6:2a:6a:a6:9c:
cc:c4:22:e3:84:b0:a3:89:9c:aa:a1:46:72:75:cf:09:f4:83:
e2:e8:f7:ac:56:89:8d:9d:a3:49:53:a5:51:2f:ed:74:37:06:
f7:ec:70:53:c0:de:a0:0c:10:7e:b8:e1:08:68:53:6b:37:8c:
fc:b5:78:20:8f:6f:20:02:dd:36:f4:f4:97:64:34:78:29:c8:
81:e8:eb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:35 2025 by rpki-client